hopefully this is right ignore the sql dns is wrong.
snoop <the zone> 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284793216 Seq=1409207309 Len=127 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409207436 Seq=1284793216 Len=78 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284793294 Seq=1409207436 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409207436 Seq=1284793294 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284793308 Seq=1409207436 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284793308 Seq=1409207436 Len=175 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409207611 Seq=1284793308 Len=224 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284793532 Seq=1409207611 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409207611 Seq=1284793532 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284793546 Seq=1409207611 Len=127 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409207738 Seq=1284793546 Len=78 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284793624 Seq=1409207738 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409207738 Seq=1284793624 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284793638 Seq=1409207738 Len=175 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409207913 Seq=1284793638 Len=224 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284793862 Seq=1409207913 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409207913 Seq=1284793862 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284793876 Seq=1409207913 Len=127 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208040 Seq=1284793876 Len=78 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284793954 Seq=1409208040 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208040 Seq=1284793954 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=34844 Push Ack=1914900443 Seq=2037185485 Len=95 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=34844 S=1389 Ack=2037185580 Seq=1914900443 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=34844 S=1389 Push Ack=2037185580 Seq=1914900443 Len=582 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284793968 Seq=1409208040 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=34844 Ack=1914901025 Seq=2037185580 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=34844 S=1389 Push Ack=2037185580 Seq=1914901025 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=64991 Syn Seq=2058355714 Len=0 Win=49640 Options=<mss 1460,nop,wscale 0,nop,nop,sackOK> sql.purple.net -> 192.168.0.105 TCP D=64991 S=1389 Syn Ack=2058355715 Seq=1936248680 Len=0 Win=49640 Options=<mss 1460,nop,wscale 0,nop,nop,sackOK> 192.168.0.105 -> sql.purple.net TCP D=1389 S=64991 Ack=1936248681 Seq=2058355715 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=64991 Push Ack=1936248681 Seq=2058355715 Len=54 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=64991 S=1389 Ack=2058355769 Seq=1936248681 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=64991 S=1389 Push Ack=2058355769 Seq=1936248681 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=64991 Ack=1936248695 Seq=2058355769 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=64991 Push Ack=1936248695 Seq=2058355769 Len=7 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=64991 S=1389 Ack=2058355776 Seq=1936248695 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=64991 Fin Ack=1936248695 Seq=2058355776 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=64991 S=1389 Ack=2058355777 Seq=1936248695 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=64991 S=1389 Fin Ack=2058355777 Seq=1936248695 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=64991 Ack=1936248696 Seq=2058355777 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=34844 Ack=1914901039 Seq=2037185580 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284793968 Seq=1409208040 Len=127 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208167 Seq=1284793968 Len=78 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794046 Seq=1409208167 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208167 Seq=1284794046 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794060 Seq=1409208167 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284794060 Seq=1409208167 Len=175 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208342 Seq=1284794060 Len=224 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794284 Seq=1409208342 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208342 Seq=1284794284 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284794298 Seq=1409208342 Len=127 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208469 Seq=1284794298 Len=78 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794376 Seq=1409208469 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208469 Seq=1284794376 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284794390 Seq=1409208469 Len=175 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208644 Seq=1284794390 Len=224 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794614 Seq=1409208644 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208644 Seq=1284794614 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284794628 Seq=1409208644 Len=127 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208771 Seq=1284794628 Len=78 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794706 Seq=1409208771 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208771 Seq=1284794706 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=34844 Push Ack=1914901039 Seq=2037185580 Len=95 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=34844 S=1389 Push Ack=2037185675 Seq=1914901039 Len=582 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794720 Seq=1409208771 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=34844 Ack=1914901621 Seq=2037185675 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=34844 S=1389 Push Ack=2037185675 Seq=1914901621 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=50158 Syn Seq=2061686269 Len=0 Win=49640 Options=<mss 1460,nop,wscale 0,nop,nop,sackOK> sql.purple.net -> 192.168.0.105 TCP D=50158 S=1389 Syn Ack=2061686270 Seq=1939767199 Len=0 Win=49640 Options=<mss 1460,nop,wscale 0,nop,nop,sackOK> 192.168.0.105 -> sql.purple.net TCP D=1389 S=50158 Ack=1939767200 Seq=2061686270 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=50158 Push Ack=1939767200 Seq=2061686270 Len=54 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=50158 S=1389 Ack=2061686324 Seq=1939767200 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=50158 S=1389 Push Ack=2061686324 Seq=1939767200 Len=14 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=50158 Ack=1939767214 Seq=2061686324 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=50158 Push Ack=1939767214 Seq=2061686324 Len=7 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=50158 S=1389 Ack=2061686331 Seq=1939767214 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=50158 Fin Ack=1939767214 Seq=2061686331 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=50158 S=1389 Ack=2061686332 Seq=1939767214 Len=0 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=50158 S=1389 Fin Ack=2061686332 Seq=1939767214 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=50158 Ack=1939767215 Seq=2061686332 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=34844 Ack=1914901635 Seq=2037185675 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284794720 Seq=1409208771 Len=133 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409208904 Seq=1284794720 Len=30 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794750 Seq=1409208904 Len=0 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Push Ack=1284794750 Seq=1409208904 Len=106 Win=49640 sql.purple.net -> 192.168.0.105 TCP D=43871 S=1389 Push Ack=1409209010 Seq=1284794750 Len=30 Win=49640 192.168.0.105 -> sql.purple.net TCP D=1389 S=43871 Ack=1284794780 Seq=1409209010 Len=0 Win=49640 -- This message posted from opensolaris.org